Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File: F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier: ickWiJEJJegy8rDxHJopxegdQkegoLIg83wvXEdKvPo=
Subject key identifier: F9:F9:5F:86:09:A3:26:1C:42:05:D6:4D:47:61:0D:24:1C:91:37:AF
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 0194BD17B16986ADE3A865144CFD1299838A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: 1n1Q04zTdHaXs9Co2veuwtfoAuY.roa (hash: afUxzktY8K6iIw5yy9bhALlArbdcu4aXL49GknMT04Q=)
2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: C0etd+w53DYn+MYt2C8ZICgQyahqtYgeUXrfS6X/t0A=)
3: LkE6OmvUvLDEPLVXvhD8kSWchgI.roa (hash: TIEViqlGaXbwRIzS3a8WhThpumMDQCKC4sJFBNgCRkg=)
4: ZFdBgXtGzTSyBGSw60XB32cB-AA.roa (hash: 9AZAjPuYZlr2IIMZY508T3D+XaoUBtHO/4Z0E+AyZEw=)
5: _OFNw-GBnd-o_UkPPoF8Y7s25zo.roa (hash: YjFqSfXiAolAj9dxHs/dwz/o2yt4XxRKBGVbY9zdKmU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b1:69:86:ad:e3:a8:65:14:4c:fd:12:99:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=f9f95f8609a3261c4205d64d47610d241c9137af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:c1:4a:c9:02:95:1f:f8:06:8b:b5:fc:a2:
b3:20:26:cc:bd:a6:e5:50:9b:de:a6:88:34:6a:4e:
6f:9b:ad:d1:82:4c:7f:1f:3d:55:b1:f1:6c:86:77:
cb:1b:37:da:bb:67:3c:c1:13:14:1c:57:df:05:ae:
cd:75:87:f5:af:5a:20:49:d7:da:a0:db:4c:a7:b8:
bf:d8:8e:3e:73:f6:6f:4e:73:de:fc:e2:3e:4c:c9:
80:9b:f5:1a:fe:9c:95:93:02:6d:fb:88:c9:25:e6:
92:b5:6e:ea:0d:66:7e:5f:b4:1a:85:ec:1c:42:c1:
f8:c4:4c:42:f0:da:8d:61:8b:33:2d:e0:bb:70:da:
3d:c1:3f:f3:a2:f3:3a:c0:a6:4f:f9:cd:e0:08:cf:
de:8e:05:3c:3a:11:d5:ee:cf:64:2b:af:f2:75:3b:
80:b2:ee:75:51:b4:68:89:f4:3d:53:55:d9:29:61:
73:69:17:84:0c:93:e9:ef:c9:08:26:50:aa:24:11:
9e:b2:70:b2:52:39:c8:24:a0:a7:14:54:69:82:ac:
0d:73:01:f8:aa:5f:57:a1:25:65:ea:40:0f:79:f5:
f5:90:f0:08:76:fa:de:20:83:53:04:8b:38:a3:42:
3c:b1:0f:06:b4:fa:a5:aa:2a:d9:21:1a:af:44:43:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F9:5F:86:09:A3:26:1C:42:05:D6:4D:47:61:0D:24:1C:91:37:AF
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:06:9c:88:e5:5b:44:c3:0d:9b:a2:ff:ec:2b:e4:85:a9:91:
d7:9f:ba:c3:06:06:9e:0f:e8:97:c5:80:4b:8e:52:9a:fe:7b:
32:fc:9a:c5:c4:ac:eb:58:53:32:84:7f:59:ed:56:0a:07:39:
33:aa:53:0b:63:87:75:de:26:0d:86:73:48:3a:e3:ea:05:3c:
dd:33:e1:30:44:98:1a:61:9a:e7:c3:c6:49:fb:38:82:9e:10:
e1:57:55:95:88:09:87:74:38:8b:06:1a:21:38:c7:ab:de:13:
03:c0:2f:eb:34:58:13:9d:19:49:5d:73:61:30:f6:99:df:78:
52:a9:d0:5b:55:c0:9a:c7:4a:9a:df:bc:21:cb:49:37:34:e1:
42:38:77:7f:22:84:cf:73:cf:a4:e9:59:80:e5:d5:dd:23:19:
1e:b3:fb:c2:5b:dc:4f:c2:47:94:3d:83:81:2f:f1:de:36:90:
80:ce:43:b0:f9:37:24:7c:2c:c1:cc:55:79:66:c9:e6:6f:bc:
71:06:ce:4b:07:e5:da:88:40:f5:cb:3e:33:92:01:6e:d4:da:
ea:71:bd:72:b9:86:33:b3:24:8c:c7:c6:06:b9:63:8a:97:45:
2f:c9:4e:53:9a:e1:3e:ae:e5:3d:dc:5c:90:5b:e4:5d:d4:0e:
72:23:ae:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7Fphq3jqGUUTP0SmYOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5
YjI5NmYwHhcNMjUwMTMxMTYwMDMzWhcNMjUwMjAxMTYwMDMzWjAzMTEwLwYDVQQD
EyhmOWY5NWY4NjA5YTMyNjFjNDIwNWQ2NGQ0NzYxMGQyNDFjOTEzN2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRXBSskClR/4Bou1/KKzICbMvabl
UJvepog0ak5vm63Rgkx/Hz1VsfFshnfLGzfau2c8wRMUHFffBa7NdYf1r1ogSdfa
oNtMp7i/2I4+c/ZvTnPe/OI+TMmAm/Ua/pyVkwJt+4jJJeaStW7qDWZ+X7Qahewc
QsH4xExC8NqNYYszLeC7cNo9wT/zovM6wKZP+c3gCM/ejgU8OhHV7s9kK6/ydTuA
su51UbRoifQ9U1XZKWFzaReEDJPp78kIJlCqJBGesnCyUjnIJKCnFFRpgqwNcwH4
ql9XoSVl6kAPefX1kPAIdvreIINTBIs4o0I8sQ8GtPqlqirZIRqvREN17QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn5X4YJoyYcQgXWTUdhDSQckTevMB8GA1UdIwQY
MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct
NzMxYWJjNmY3NWNhLzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh
LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKgaciOVb
RMMNm6L/7CvkhamR15+6wwYGng/ol8WAS45Smv57MvyaxcSs61hTMoR/We1WCgc5
M6pTC2OHdd4mDYZzSDrj6gU83TPhMESYGmGa58PGSfs4gp4Q4VdVlYgJh3Q4iwYa
ITjHq94TA8Av6zRYE50ZSV1zYTD2md94UqnQW1XAmsdKmt+8IctJNzThQjh3fyKE
z3PPpOlZgOXV3SMZHrP7wlvcT8JHlD2DgS/x3jaQgM5DsPk3JHwswcxVeWbJ5m+8
cQbOSwfl2ohA9cs+M5IBbtTa6nG9crmGM7MkjMfGBrljipdFL8lOU5rhPq7lPdxc
kFvkXdQOciOuGQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:49 2025 by rpki-client